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CLAIM AMENDMENTS 

This listing of claims will replace all prior versions and listings of claims in the 
application. 

1. (Currently Amended) A method of generating successive round keys of an 
expanded key from an initial cryptographic key for use in an encryption and/or 
decryption engine, comprising th e stop s o f : 

storing tfee-Nk words of the initial key in Nk locations of a memory; 

providing the initial key to a cryptographic engine for performing a first 
cr3rptographic round; 

repeatedly retrieving a selected first word and a selected second word of the 
expanded key, at least one of which is retrieved from the memoryy-a»d; 

generating from the selected first and second words a-successive subsequent 
wefd -words of the expanded key; 

providing the generated words of the expanded key to the cryptographic 
engine as round keys for performing subsequent cryptographic rounds; &b4 

storing successive ones of the generated safeseqiieirt-words in the memory by 
cycUcally overwriting previously generated words of the expanded ke v: and 

maintainingf four successive words from the generated words in the memory 
as long as they are required for use in the generation of subsequent words and for 
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17 use in a par allel operation of a cryptographic process, wherein the four successive 

1 8 words comprise a new round key . 

1 2. (Currently Amended) The method of claim 1^ 

2 in which t h e step of overwriting said p reviously generated words only occurs 

3 after feese- said previously generat ed words have been used as said first and/or said 

4 second selected words in tho st ep o l ^while generating a rc spe c t i ve -saidLsubsequent 

5 w&¥ 4 words . 

1 3. (Currently Amended) The method of claim 1^ 

2 in which tfee-a__number of memory locations used is less than #ie-a_number of 

3 words in the expanded key. 

1 4. (Currently Amended) The method of claim 1^ 

2 in which %he-a_number of memory locations used is equal to Nk. 

1 5. (Currently Amended) The method of claim 4i 

2 in which the-words of the initial key are also overwritten by words of the 

3 expanded key during the overwriting-«tep. 

1 I 6. (Currently Amended) The method of claim 1^ 
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2 I in which #ie-a_number of memory locations used is equal to 2Nk. 

1 I 7. (Currently Amended) The method of claim 1^ 

2 in which the memory is divided into two parts, a first part storing the initial 

3 I key and the-a_second part receiving the successive succossivoly gGncrated-w ords of 

4 the expanded key. 

1 8. (Currently Amended) The method of claim 7^ further including tho stop of : 

2 completing generation of the expanded key such that the-a_final round key is 

3 stored in the second part of the memory and the initial key is still stored in the first 

4 part of the memory. 

1 j 9. (Currently Amended) The method of claim 8^ further includin gth o step of : 

2 performing a repeat key expansion starting with the initial key stored in the 

3 first part of the memory. 

1 j 10. (Currently Amended) The method of claim 8, further includingtfee-et-ep-efl 

2 performing an inverse key expansion starting with the final round key stored 

3 in the second part of the memory. 
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1 11. (Currently Amended) The method of a n y one of claims 1 claim 1, further 

2 including the s te p o£: 

3 completing generation of the expanded key such that the-aLfinal round key is 

4 stored in the memory and the initial key has been overwritten. 



12. (Currently Amended) The method of claim 11^ further includingt h o sto p of : 
performing an inverse key expansion starting with the final round key stored 

in the memory in order to regenerate the initial key for a subsequent cryptographic 
operation. 

13. (Currently Amended) The method of claim 7^ 

in which the-a_number of memory locations used is equal to 2Nk, the first and 
the second parts having Nk locations each. 



14. (Currently Amended) The method of 



-claim 1. further 



eom-pnses: 

generating successive words of the-AES Rijndael block cipher round keys 
according to #ie-an_AES key expansion function. 
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1 I 15. (Currently Amended) The method of claim 14 

2 in which Nk=8. 

1 I 16. (Currently Amended) The method of claim 1^ 

2 in which the successive subsequent words of the expanded key comprise 

3 words of encryption round keys. 

1 j 17. (Currently Amended) The method of claim 1^. 

2 in which the successive subsequent words of the expanded key comprise 

3 words of decr3^tion round keys. 

1 18. (Currently Amended) The method of claim 1 . further comprising: 

2 in which the stop of providing the gonoratcd wordo of tho expanded key to tho 

3 c r yptographic engine comprise s 

4 providing the generated words on a word-by-word basis as the crs^tographic 

5 engine consumes the generated w ords as round keys. 

1 19. (Currently Amended) The method of claim 1^ 

2 in which ; in the retrieving step, b oth the selected first word and the selected 

3 second word are retrieved from the memory. 
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1 20. (Currently Amended) The method of claim 1^ 

2 in whichy-i fi - the - retrie ving s top, the selected first word is retrieved from 

3 memory and the selected second word is retrieved from a register used in a previous 

4 iteration. 

1 21. (Currently Amended) The method of claim 1^ 

2 in which tfee-step-ef^providing the generated words of the expanded key to the 

3 cryptographic engine comprises: 

4 providing said generated words from the memory. 

1 22. (Currently Amended) The method of claim 1^ 

2 in which the stop of generating includes, in at least some cycles of round key 

3 word generation, the stop of performing an S-box transform using an S-box shared 

4 with the crsqitographic engine. 

1 23. (Currently Amended) The method of claim 22^ further comprising 

3 maintaining synchronism of the generation of successive round key words 

4 with consumption of the round key words by the cryptographic engine. 
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1 24. (Currently Amended) A round key generator for generating successive round 

2 keys of an expanded key from an initial cr3rptographic key for use in an encryption 

3 and/ep decryption engine, comprising: 

4 a memory for storing #i:e-Nk words of the initial key; 

5 an expansion processor for 

6 repeatedly retrieving a selected first word and a selected second word 

7 of the expanded key, at least one of which is retrieved from the memory, and 

8 generating from the selected first and second words a-successive 

9 subsequent wefd -words of the expanded key; 

10 means for providing the generated words of the expanded key to the 

11 I e?ypt^&pb4e-encrvptio n and decryption engine as round keys for performing 

12 subsequent cryptographic rounds; 

13 I means for storing the successive ones of the gGncratcd subsequent words in 

14 the memory by cyclically overwriting previously generated words of the expanded 

1 5 ke y: and 

16 means for maintaining four successive words from the generated words in 

1 7 memory as long as they are required for use in the generation of subsequent words 

18 and for use in a parallel operation of a cryptographic process, wherein the four 

19 successive words comprise a new round key . 

1 I 25. (Currently Amended) The apparatus of claim 24^ further including: 

-8- 



Application No.: 1 0/5 1 9,586 
Attorney's Docket No.: 81 131258 

2 control means for ensuring said previously generated words are overwritten 

3 only after tbese- said previously generated w ords have been used as said first and/or 

4 said second selected words by the expansion processor. 

1 26. (Currently Amended) The apparatus of claim 24 

2 in which tfee-a number of word locations in memory is less than the-a.number 

3 of words in the expanded key. 

1 27. (Currently Amended) The apparatus of claim 24 

2 in which tfe:e-a.number of word locations in the memory is equal to Nk. 

1 28. (Currently Amended) The apparatus of claim 27^ 

2 in which the-words of the initial key are also overwritten by words of the 

3 expanded key during the overwriting. 

1 29. (Currently Amended) The apparatus of claim 24^ 

2 in which t-he-a_number of word locations in the memory is equal to 2Nk. 

1 30. (Currently Amended) The apparatus of claim 24^ 

2 in which the memory is divided into two parts^: 

3 a first part storing the initial key^ and 
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4 I t-be~-a_„second part receiving the successively generated words of the 

5 expanded key. 

1 31. (Currently Amended) The apparatus of claim 30^ 

2 in which the means for storing stores the-a_final round key in the second part 

3 of the memory and retains the initial key in the first part of the memory after 

4 completion of generation of the expanded key. 

1 I 32. (Currently Amended) The apparatus of claim 31^ further including: 

2 means for performing a repeat key expansion starting with the initial key 

3 stored in the first part of the memory. 

1 I 33. (Currently Amended) The apparatus of claim 31^, further including: 

2 means for performing an inverse key expansion starting with the final round 

3 key stored in the second part of the memory. 

1 34. (Currently Amended) The apparatus of aey-OBre-ef-claim 24^ further including^ 

2 means for completing generation of the expanded key such that tbe-a_final 

3 round key is stored in the memory and the initial key has been overwritten, 

1 35. (Currently Amended) The apparatus of claim 34^ further including: 
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2 means for performing an inverse key expansion starting with the final round 

3 key stored in the memory in order to regenerate the initial key for a subsequent 

4 cryptographic operation. 

1 36. (Currently Amended) The apparatus of claim 30^^ 

2 in which %he-a.number of word locations in the memory is equal to 2Nk, the 

3 first and the second parts having Nk locations each. 

1 j 37. (Currently Amended) The apparatus of any procoding claim 24^, 

2 in which the expansion processor includes means for generating successive 

3 I words of the-AES Rijndael block cipher round keys according to the-an AES key 

4 expansion function. 

1 I 38. (Currently Amended) The apparatus of claim 37^ 

2 in which Nk=8. 

1 I 39. (Currently Amended) The apparatus of claim 24. 

2 in which the expansion processor generates words of encryption round keys. 
1 40. (Currently Amended) The apparatus of claim 24^ 
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2 I in which tbe-an expansion key processor generates words of decryption round 

3 keys. 

1 I 41. (Currently Amended) The apparatus ofclaim 24 further including: 

2 a cryptographic engine, and 

3 means for providing the generated words of the expanded key to the 

4 cryptographic engine on a word-by-word basis as the cryptographic engine 

5 consumes the words as round keys. 

1 I 42. (Currently Amended) The apparatus of claim 24;, further including: 

2 means for retrieving both the selected first word and the selected second 

3 word from the memory. 

1 43. (Currently Amended) The apparatus of claim 24^ further includingi 

2 means for retrieving the selected first word from the memory and the selected 

3 second word from a register in the expansion processor. 

1 44. (Currently Amended) The apparatus of claim-4: 24. further including: 

2 a cryptographic engine, in which the expansion processor and the 

3 cryptographic engine share an S-box. 



-12- 



Application No.: 10/519,586 
Attorney's Docket No.: 81131258 

1 45. (Currently Amended) The apparatus of claim 44. further including: 

2 #ie-means for maintaining synchronism of the expansion processor and the 

3 cryptographic engine, 

1 46. (Currently Amended) A smart card incorporating the The r ound key 

2 generator accordinff te -of claim 24 , further comprising: 

3 a smart card . 

1 47. (Canceled). 

2 

1 48 (Currently Amended) The method of claim-4?_l, 

2 in which the initial key wor ds aF e-fttee-is maintained in the memory during 

3 the entire procoB S of w hile g enerating successive subsequent words of the expanded 

4 key. 

1 49-54. (Canceled). 
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